---
title: "Finishes security key registration and stores credential. Enables security key as a 2sv media type if it is a user's first key."
method: POST
path: "/v1/users/{userId}/configuration/security-key/enable-verify"
tags: ["Accounts"]
---

# Finishes security key registration and stores credential. Enables security key as a 2sv media type if it is a user's first key.

`POST /v1/users/{userId}/configuration/security-key/enable-verify`

## Path parameters

- `userId` integer, required

## Request body

- RobloxTwoStepVerificationApiEnableVerifySecurityKeyRequest — Request information needed to complete the registration of a security key.
  - `sessionId` string — The session of the registration attempt.
  - `credentialNickname` string — The nickname of the new credential.
  - `attestationResponse` string — The hardware key's response.

## Response `200`

OK

- RobloxWebWebAPIApiEmptyResponseModel

## Other responses

- `400` — 2: The user ID is invalid. 17: Invalid security key nickname.
- `401` — 0: Authorization has been denied for this request.
- `403` — 0: Token Validation Failed 17: Invalid security key nickname.
- `503` — 7: Two step verification is currently under maintenance.

---

[API](https://skmtc.net/roblox/apis/roblox-api.md) · [All operations](https://skmtc.net/roblox/apis/roblox-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/roblox/roblox-api/versions/756260310407/schema)